322

Larion Studios forum stores your passwords in unhashed plaintext. (lemmy.world)

submitted 11 months ago by [email protected] to c/[email protected]

217 comments fedilink hide all child comments

Larion Studios forum stores your passwords in unhashed plaintext. Don't use a password there that you've used anywhere else.

you are viewing a single comment's thread
view the rest of the comments

[-] [email protected] 74 points 11 months ago

https://bitwarden.com/

[-] [email protected] 11 points 11 months ago

I want to suggest 1Password even though it’s not free (I used bitwarden for many years though). It has its own SSH agent which is a dream.

[-] [email protected] 7 points 11 months ago

The only problem with their SSH agent is, if you store let’s say 6 keys and the server is set to accept a maximum of 5 keys before booting you, and the correct key happens to be key number 6, you can end up being IP banned.

This happened to me on my own server :P

That being said, my experience was using the very first GA release of their SSH Agent, so it’s possible the problem has been sorted by now.

[-] [email protected] 10 points 11 months ago

BitWarden is awesome. Been using it since 2 of my colleagues went to work for them

[-] [email protected] 1 points 11 months ago

How is this better than Firefox built-in password manager?

[-] [email protected] 4 points 11 months ago* (last edited 11 months ago)

Firefox is extremely easy to get your password from behind the *** if it autofills. Requires physical access, but literally takes seconds. Right click the field, inspect and change the field type from password to text.

[-] [email protected] 2 points 11 months ago

So if my passwords are behind fingerprint there's no problem?

[-] [email protected] 1 points 11 months ago

On mobile I'm assuming. I personally don't know a way to bypass the fingerprint locks. And if you're also having Firefox create random difficult passwords, its significantly better than reusing the same one. So you're probably a much harder target than the majority of people. I'd have to double check but I think even on desktop if you have a master password for Firefox and don't just have logins auto filled you're probably good there too.